rxPhysicalDrives: Returns a list of physical drives that have been or currently...

rxPhysicalDrivesR Documentation

Returns a list of physical drives that have been or currently are mounted to the computer.

Description

This excludes network drives. See https://www.forensicmag.com/article/2012/06/windows-7-registry-forensics-part-5

Usage

rxPhysicalDrives(duplicates = FALSE)

Arguments

duplicates

Return drives with duplicate entries in SYSTEM\\MountedDevices; These are likely removable media. By default this is FALSE

Value

Drives with letters

Author(s)

Matthew L. Fidler


RxODE documentation built on March 23, 2022, 9:06 a.m.